aethergate-pro

本页保存的是公开项目资料快照，阅读过程不需要连接 GitHub。

AetherGate Pro 🌌

中文文档

AetherGate Pro is an enterprise-grade, high-availability VPN & Proxy Gateway manager designed to run on Linux Virtual Private Servers (VPS). Built by and for proxy network engineers, it solves the notorious issue of SSH disconnection and routing conflicts commonly experienced when running VPN gateways directly on VPS host interfaces.

By isolating all VPN activity inside a dedicated Linux Network Namespace (netns) and routing proxy traffic via an asynchronous single-port mixed protocol (SOCKS5/HTTP) server, AetherGate Pro provides a seamless, self-healing proxy gateway with a gorgeous glassmorphic dashboard.

---

🚀 Key Features

• Network Namespace Isolation (netns): Restricted default routing within vpn_ns namespace prevents host interface pollution. Say goodbye to SSH drops and disconnected VPS sessions!
• Mixed Protocol Single-Port Proxy: Auto-sniffs incoming client connections on port 7928 to serve both SOCKS5 and HTTP protocols on a single port.
• Auto-Geolocation & Scamalytics Fraud Score Filtering: Concurrently scrapes VPNGate, performs latency pinging, runs IP geolocations, and checks Scamalytics fraud risks. Hides nodes with a fraud score $\ge 10$ to guarantee pure residential/mobile outbound traffic.
• Modern Web Dashboard: A futuristic, glassmorphic dark-themed control center featuring mouse spotlight tracking, real-time diagnostic consoles, auto-refreshing connection tables, and lock settings.
• Watchdog Self-Healing: Automatically monitors the VPN tunnel. If a node fails or latency spikes, the background watchdog triggers auto-reconnection/failover.
• Systemd Daemon Integration: Designed to run as a persistent system service that auto-starts on system boot.

---

🛠️ Architecture Overview

flowchart TD
    subgraph Host OS [Host OS Network Space]
        SSH[SSH Session - Port 22] -->|No interference| HostRouting[Host Routing Table]
        User[Admin Browser] -->|Port 8787| WebUI[Async Dashboard Server]
        ClientProxy[Client Proxy App] -->|Port 7928| SocatForwarder[socat Port Forwarder]
    end

    subgraph NetNS [vpn_ns isolated namespace]
        SocatForwarder -->|Forward tunnel| NamespaceProxy[Mixed SOCKS5/HTTP Proxy]
        NamespaceProxy -->|Outbound request| OpenVPN[OpenVPN Client Process]
        OpenVPN -->|Tunnel Interface tun0| VirtualEthernet[veth_vpn: 10.200.0.2]
    end

    VirtualEthernet <-->|NAT Masquerade| veth_host[veth_host: 10.200.0.1]
    veth_host <--> Internet((Global Internet))
    OpenVPN <-->|Encrypted Tunnel| VPNGateNode[VPNGate Target Node]

---

📥 VPS Deployment Guide

This guide describes how to deploy AetherGate Pro on a clean Linux VPS (Ubuntu 20.04/22.04+ or Debian 11+ recommended).

Option 1: One-Key Installation (Recommended)

Simply run the following command on your VPS to automatically pull the repository and install the gateway:

curl -sSL https://raw.githubusercontent.com/JFGAtlas/aethergate-pro/main/install_vps.sh | bash

---

Option 2: Manual Installation

1. Prerequisites

Ensure you have root access to your VPS. Connect via SSH:

ssh root@your_vps_ip

2. Clone Repository to VPS

git clone https://github.com/JFGAtlas/aethergate-pro.git /tmp/aethergate-pro

3. Run the Installer

cd /tmp/aethergate-pro
sudo bash install.sh

What the installer does:

1. Installs system packages: openvpn, socat, python3, iptables.
2. Cleanly stops any conflicting older proxy daemons.
3. Places the codebase into the target production directory /opt/vpngate-pro/.
4. Migrates existing credentials (/opt/aimilivpn/vpngate_data/ui_auth.json) into /opt/vpngate-pro/vpngate_data/config.json if present.
5. Sets up persistent IP forwarding (sysctl).
6. Configures and registers the vpngate-pro.service systemd service.
7. Automatically launches the service.

4. Verify the Installation

Check that the AetherGate systemd service is active:

sudo systemctl status vpngate-pro

You should see output indicating the service is active (running).

---

🖥️ Usage & Access

1. Web Dashboard

After successful installation, the Web Dashboard will be exposed at:

• URL: http://:8787// (Note: The “ is generated on first startup. You can read or customize it in the config file).
• Default Credentials:
  • Username: admin
  • Password: A random password stored in /opt/vpngate-pro/vpngate_data/config.json on first startup (or migrated from your old installation).

2. Connecting to Proxy

Set up your local browser (e.g., SwitchyOmega) or system client to use the Mixed Proxy:

• Proxy Address: “
• Proxy Port: 7928
• Supported Protocols: SOCKS5 (recommended) or HTTP (both listen on 7928 simultaneously).

---

⚙️ Advanced Customization

You can manually tweak settings in /opt/vpngate-pro/vpngate_data/config.json:

{
  "username": "admin",
  "password": "your_secure_password",
  "secret_path": "your_dashboard_url_token",
  "ui_host": "0.0.0.0",
  "ui_port": 8787,
  "proxy_host": "127.0.0.1",
  "proxy_port": 7928,
  "routing_mode": "auto",
  "force_country": "",
  "connection_enabled": false,
  "fixed_node_id": "",
  "scamalytics_threshold": 10
}

Remember to run sudo systemctl restart vpngate-pro after modifying the configuration manually.

---

🗃️ Management Commands

# Restart the gateway and cleanly recreate namespace/forwarding rules
sudo systemctl restart vpngate-pro

# Stop the gateway and tear down network namespaces
sudo systemctl stop vpngate-pro

# View live system logs and connection states
sudo journalctl -u vpngate-pro -f --no-pager

---

🗑️ Uninstallation & Clean Up

If you need to uninstall AetherGate Pro and completely remove all configuration caches, network namespaces, and virtual network interfaces from your VPS, run the following one-key uninstaller:

curl -sSL https://raw.githubusercontent.com/JFGAtlas/aethergate-pro/main/uninstall.sh | bash

[!IMPORTANT] The uninstaller script will automatically perform the following cleanup:

1. Stop and disable the vpngate-pro systemd service, removing the systemd configuration file.
2. Force terminate any orphaned openvpn, socat forwarding, and proxy processes.
3. Destroy the vpn_ns network namespace, delete the virtual interface veth_host, and remove /etc/netns/vpn_ns DNS overrides.
4. Delete the iptables NAT masquerade rules injected by AetherGate.
5. Revert the sysctl kernel tunables and completely delete /opt/vpngate-pro deployment directory and configuration files.

---

⚖️ License

This project is open-source and licensed under the MIT License. Feel free to fork, contribute, and open issues.

---

💖 Declaration & Donation (Charity Open-Source Project)

This project is a charity open-source project, ad-free, permanently updated, and completely free to use. If you find it helpful, feel free to support the author by donating to the following addresses:

• EVM (ETH/BSC/Polygon, etc.): 0x3EE918603d5a1c0f983BEC5B5d8C301F8ed58A2C
• SOL: 2LEDYj19kormPezoiFgZAguyCVsfaM3HExsYe2NWpNqk
• BTC: bc1qs2nwumk24fjtk574f0awaxnh7jl9v7shrd5yw7

---

📞 Contact Me

• X (Twitter): @JFGAi
• Telegram: https://t.me/jfgae
• GitHub: https://github.com/JFGAtlas